What best practices should be followed when querying a MySQL database in PHP to retrieve data based on a specific month?

When querying a MySQL database in PHP to retrieve data based on a specific month, it is best practice to use parameterized queries to prevent SQL injection attacks. Additionally, you should use the DATE_FORMAT function in MySQL to extract the month from the date column in the database table. This ensures that the query is efficient and accurate in retrieving data for the specified month.

<?php
// Connect to MySQL database
$mysqli = new mysqli("localhost", "username", "password", "database");

// Check connection
if ($mysqli->connect_error) {
    die("Connection failed: " . $mysqli->connect_error);
}

// Specify the month for which data needs to be retrieved
$month = 5; // May

// Prepare SQL query with parameterized query and DATE_FORMAT function
$query = $mysqli->prepare("SELECT * FROM table_name WHERE DATE_FORMAT(date_column, '%m') = ?");
$query->bind_param("i", $month);
$query->execute();

// Fetch results
$result = $query->get_result();

// Output data
while ($row = $result->fetch_assoc()) {
    // Output data as needed
}

// Close connection
$mysqli->close();
?>